Snort dropping packets. (fwd)

[Emilio Mira <emial () alumni uv es>]

I sent this mail few days ago, but I hadn't received any reply. It's about 
packets dropped by Snort.

Anyone could give me a response?.

Thank you.

---------- Forwarded message ----------
Date: Thu, 11 Jul 2002 12:10:20 +0200 (CEST)
From: Emilio Mira <emial () alumni uv es>
To: snort-users () lists sourceforge net
Subject: Snort dropping packets.


Hi all,

I'm meassuring Snort dropped packets with 'kill -USR1 <pid>' and
apparently Snort is working without drops. But if I get received packets
by the interface from /proc/net/dev and processed packets from Snort with
'kill -USR1 <pid>', there are diferences (see JPG attached).

Why doesn't USR1 shows me real dropped packets?. 

I'm using Snort 1.8.7 with default configuration and libpcap 0.7.1 on
RH7.2. and an ATM interface.

Thanks.

--
Emilio Mira